Cisco 7604 Configuration Manual page 32

Task
Step 9
Configure routing using one of these methods:
• Configuring a Static Route, page 8-3
• Configuring BGP Stub Routing, page 8-6
(Single context mode only)
•
(Single context mode only)
•
page 8-22
(Single context mode only)
•
Step 10 (Might be required) Use one or more of these NAT methods:
Using Dynamic NAT and PAT, page 16-19
•
Using Static NAT, page 16-29
•
Using Static PAT, page 16-31
•
Step 11 Adding an Extended ACE, page 13-7
Step 12
Applying an Access List to an Interface, page 15-4
Transparent Firewall Minimum Configuration Steps
To configure the FWSM in transparent mode, perform the following steps:
Task
Step 1 Assigning VLANs to the Firewall Services Module, page 2-2
Step 2 (Might be required)
the MSFC, page 2-4
Step 3 Connecting to the Firewall Services Module, page 3-1
Step 4 (Might be required; multiple context mode only)
Disabling Multiple Context Mode, page 4-10
Step 5 (Multiple context mode only)
Context, page 4-27
Step 6 (Multiple context mode only)
and the System Execution Space, page 4-31
Step 7 Setting Transparent or Routed Firewall Mode, page 5-17
Catalyst 6500 Series Switch and Cisco 7600 Series Router Firewall Services Module Configuration Guide using ASDM
xxxii
Configuring OSPF, page 8-9
Configuring EIGRP,
Configuring RIP, page 8-21
Adding Switched Virtual Interfaces to
Configuring a Security
Changing Between Contexts
Description
In multiple context mode, static routing and stub BGP
is the only routing method supported. In single mode,
you have a choice of static, stub BGP, RIP, EIGRP, or
OSPF.
Configure NAT if you use private addresses, or want
the extra security.
Before any traffic can go through the FWSM, you
must create an access list that permits traffic.
Apply the access list to an interface.
Description
On the switch, you need to assign VLANs to the
FWSM so that the FWSM can send and receive traffic
on the switch.
If you want the MSFC to route between VLANs that
are assigned to the FWSM, complete this procedure.
From the switch CLI, you can session into the FWSM
to access the FWSM CLI.
Enabling or If you want to use multiple context mode and your
FWSM is not already configured for it, or if you want
to change back to single mode, follow this procedure.
Add a security context.
Because you must configure some settings in the
system execution space and some settings within the
context, you need to know how to switch between
contexts and the system execution space.
Before you configure any settings, you must set the
firewall mode to transparent mode. Changing the
mode clears your configuration. In multiple context
mode, set the mode in each context.
Quick Start Steps
OL-20748-01